CVEvulnerability

CVE-2012-4897

6.9 MEDIUM Published 2012-10-05 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-10-05
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C

Description

Untrusted search path vulnerability in the installer in VMware Movie Decoder before 9.0 allows local users to gain privileges via a Trojan horse executable file in the installer directory.

Affected configurations

• vmware movie decoder (<= 7.1.2) • vmware movie decoder 6.5.2 • vmware movie decoder 6.5.3 • vmware movie decoder 6.5.4 • vmware movie decoder 6.5.5 • vmware movie decoder 7.0

References